JP2023057798A5

JP2023057798A5 -

Info

Publication number: JP2023057798A5
Application number: JP2021167466A
Authority: JP
Filing date: 2021-10-12
Publication date: 2024-03-19

Description

本開示の一態様に係る車載装置は、車外の外部サーバから送信される更新プログラムを取得し、車両に搭載される車載ＥＣＵのプログラムを更新するための処理を行う車載装置であって、前記更新プログラムに関する処理を行う制御部を備え、前記制御部は、前記更新プログラムを取得する際、更新対象の車載ＥＣＵに対する動作確認を行うための動作確認シナリオを前記外部サーバから取得し、取得した前記更新プログラム及び前記動作確認シナリオを前記更新対象の車載ＥＣＵに出力し、前記動作確認シナリオに基づき、前記更新対象の車載ＥＣＵに対する動作確認に関する処理を行う。 An in-vehicle device according to one aspect of the present disclosure is an in-vehicle device that acquires an update program transmitted from an external server outside the vehicle and performs processing for updating a program in an in-vehicle ECU installed in the vehicle, a control unit that performs processing related to a program; when acquiring the update program, the control unit acquires from the external server an operation check scenario for checking the operation of the in-vehicle ECU to be updated; The program and the operation check scenario are output to the in-vehicle ECU to be updated, and processing related to the operation check for the in-vehicle ECU to be updated is performed based on the operation check scenario.

実施形態１に係る車載装置を含む車載更新システムの構成を例示する模式図である。1 is a schematic diagram illustrating a configuration of an in-vehicle update system including an in-vehicle device according to a first embodiment; FIG. 図２は、車載装置の物理構成を例示するブロック図である。FIG. 2 is a block diagram illustrating the physical configuration of the in-vehicle device. 車載装置及び更新対象の車載ＥＣＵ等による処理の流れ（シーケンス）を例示する説明図である。FIG. 2 is an explanatory diagram illustrating a processing flow (sequence) by an on-vehicle device, an on-vehicle ECU to be updated, and the like. 車載装置の制御部の処理を例示するフローチャートである。3 is a flowchart illustrating processing of a control unit of an in-vehicle device. 実施形態２に係る車載装置の制御部の処理を例示するフローチャートである。12 is a flowchart illustrating processing of a control unit of an in-vehicle device according to a second embodiment.

（１）本開示の一態様に係る車載装置は、車外の外部サーバから送信される更新プログラムを取得し、車両に搭載される車載ＥＣＵのプログラムを更新するための処理を行う車載装置であって、前記更新プログラムに関する処理を行う制御部を備え、前記制御部は、前記更新プログラムを取得する際、更新対象の車載ＥＣＵに対する動作確認を行うための動作確認シナリオを前記外部サーバから取得し、取得した前記更新プログラム及び前記動作確認シナリオを前記更新対象の車載ＥＣＵに出力し、前記動作確認シナリオに基づき、前記更新対象の車載ＥＣＵに対する動作確認に関する処理を行う。 (1) An in-vehicle device according to one aspect of the present disclosure is an in-vehicle device that acquires an update program transmitted from an external server outside the vehicle and performs processing for updating a program in an in-vehicle ECU installed in the vehicle. , a control unit that performs processing related to the update program, and the control unit, when acquiring the update program, acquires an operation check scenario for checking the operation of the in-vehicle ECU to be updated from the external server; The updated program and the operation check scenario are output to the in-vehicle ECU to be updated, and processing related to operation check for the in-vehicle ECU to be updated is performed based on the operation check scenario.

図３は、車載装置２及び更新対象の車載ＥＣＵ３等による処理の流れ（シーケンス）を例示する説明図である。更新プログラムを用いて、更新対処の車載ＥＣＵ３におけるプログラム更新に関する処理を行うにあたり、プログラム提供装置Ｓ１（ＯＴＡサーバ）、車載装置２（ＯＴＡマスタ）、及び更新対象の車載ＥＣＵ３（ターゲットＥＣＵ）それぞれの処理シーケンスについて説明する。 FIG. 3 is an explanatory diagram illustrating the flow (sequence) of processing by the on-vehicle device 2, the on-vehicle ECU 3, etc. to be updated. When performing processing related to the program update in the in-vehicle ECU 3 for update using the update program, each process of the program providing device S1 (OTA server), the in-vehicle device 2 (OTA master), and the in-vehicle ECU 3 to be updated (target ECU) is performed. Explain the sequence.

プログラム提供装置Ｓ１は、更新プログラム及び動作確認シナリオを含むパッケージを生成する（Ｓ０２）。プログラム提供装置Ｓ１は、車載装置２から取得した車両構成情報に基づき、パッケージを生成する。当該パッケージには、プログラム更新に関する情報であるパッケージ情報（キャンペーン情報）、更新対象となる車載ＥＣＵ３に関する情報（ターゲット情報）、更新対象の車載ＥＣＵ３に対し適用される更新プログラム、及び当該更新プログラムを車載ＥＣＵ３に適用した際の動作確認を行うための動作確認シナリオが含まれている。当該動作確認シナリオには、更新対象の車載ＥＣＵ３に対し、車載装置２が行う動作確認用の処理シーケンス、スクリプト、又はコマンド等の実行手順が列挙されている。動作確認シナリオは、更に、更新対象の車載ＥＣＵ３が行う動作確認用の処理シーケンス等、及び車載装置２と更新対象の車載ＥＣＵ３とによる動作確認の結果を検証（成否判定）するための判定情報が含まれている。プログラム提供装置Ｓ１は、車載装置２から送信された車両構成情報に基づき、当該車載装置２が搭載される車両Ｃの実環境に則した動作確認シナリオを生成することができる。プログラム提供装置Ｓ１は、生成したパッケージを車載装置２に出力（送信）する（Ｓ０３）。 The program providing device S1 generates a package including an update program and an operation check scenario (S02). The program providing device S1 generates a package based on the vehicle configuration information acquired from the in-vehicle device 2. The package includes package information (campaign information) that is information about the program update, information about the in-vehicle ECU 3 to be updated (target information), an update program to be applied to the in -vehicle ECU 3 to be updated, and the update program to be installed in the vehicle. It includes an operation check scenario for checking the operation when applied to the ECU 3. The operation confirmation scenario lists execution procedures such as processing sequences, scripts, or commands for operation confirmation performed by the in-vehicle device 2 on the in-vehicle ECU 3 to be updated. The operation confirmation scenario further includes a processing sequence for operation confirmation performed by the in-vehicle ECU 3 to be updated, and judgment information for verifying (success/failure judgment) the results of operation confirmation by the in-vehicle device 2 and the in-vehicle ECU 3 to be updated. include. Based on the vehicle configuration information transmitted from the on-vehicle device 2, the program providing device S1 can generate an operation confirmation scenario that conforms to the actual environment of the vehicle C in which the on-vehicle device 2 is mounted. The program providing device S1 outputs (transmits) the generated package to the in-vehicle device 2 (S03).

車載装置２の制御部２０は、プログラム提供装置Ｓ１へ、車両Ｃ（自車）の車両構成情報を出力（送信）する（Ｓ１０１）。車載装置２の制御部２０によるプログラム提供装置Ｓ１への車両構成情報の出力は、車載ＥＣＵ３に対するプログラムの更新処理を行う際に限定されず、当該車両構成情報の出力は定常的に行われるものであってもよい。すなわち、車載装置２の制御部２０は、定常的又は周期的に車両Ｃ（自車）に搭載されている全ての車載ＥＣＵ３から、当該車載ＥＣＵ３に適用されているプログラム情報及び型式情報を取得し、取得及び集約した情報を車両構成情報として記憶する。車載装置２の制御部２０は、ＶＩＮが含まれる車両構成情報を、定常的又は周期的にプログラム提供装置Ｓ１に送信するものであってもよい。これにより、プログラム提供装置Ｓ１は、ＶＩＮが含まれる車両構成情報に基づき、対象となる車両Ｃを特定し、当該特定した車両Ｃに応じたパッケージを作成する。プログラム提供装置Ｓ１によって作成されたパッケージは、プログラム更新に関する情報であるパッケージ情報（キャンペーン情報）、更新対象となる車載ＥＣＵ３に関する情報（ターゲット情報）、更新プログラム（更新データ）、及び動作確認シナリオを含む。 The control unit 20 of the in-vehicle device 2 outputs (transmits) vehicle configuration information of the vehicle C (own vehicle) to the program providing device S1 (S101). The output of the vehicle configuration information by the control unit 20 of the in-vehicle device 2 to the program providing device S1 is not limited to when performing a program update process for the in-vehicle ECU 3, and the output of the vehicle configuration information is performed regularly. There may be. That is, the control unit 20 of the in-vehicle device 2 regularly or periodically acquires program information and model information applied to the in-vehicle ECU 3 from all the in-vehicle ECUs 3 installed in the vehicle C (own vehicle). , the acquired and aggregated information is stored as vehicle configuration information. The control unit 20 of the in-vehicle device 2 may regularly or periodically transmit vehicle configuration information including the VIN to the program providing device S1. Thereby, the program providing device S1 specifies the target vehicle C based on the vehicle configuration information including the VIN, and creates a package according to the specified vehicle C. The package created by the program providing device S1 includes package information (campaign information) that is information about program updates, information about the in-vehicle ECU 3 to be updated (target information), an update program (update data), and an operation confirmation scenario. .

Claims

An in-vehicle device that acquires an update program transmitted from an external server outside the vehicle and performs processing for updating a program in an in-vehicle ECU installed in the vehicle,
comprising a control unit that performs processing related to the update program,
The control unit includes:
When acquiring the update program, acquiring an operation check scenario from the external server for checking the operation of the in-vehicle ECU to be updated;
outputting the acquired update program and the operation confirmation scenario to the in-vehicle ECU to be updated;
An in-vehicle device that performs processing related to operation confirmation for the in-vehicle ECU to be updated based on the operation confirmation scenario.

The in-vehicle device according to claim 1, wherein the control unit performs processing related to operation check for the in-vehicle ECU to be updated by substituting another in-vehicle ECU other than the in-vehicle ECU to be updated based on the operation check scenario. Device.

The operation confirmation scenario is
a processing sequence in which the control unit replacing the other in-vehicle ECU transmits data to the in-vehicle ECU to be updated;
The in-vehicle device according to claim 2, further comprising a processing sequence in which the in-vehicle ECU to be updated to which the update program is applied transmits data to the other in-vehicle ECU replaced by the control unit.

The operation check scenario includes determination information for determining the result of operation check for the in-vehicle ECU to be updated,
The control unit includes:
Obtaining the result of the operation check by performing a process related to the operation check for the in-vehicle ECU to be updated;
Based on the obtained operation check result and the determination information included in the operation check scenario, the success or failure of updating the program in the in-vehicle ECU to be updated is determined. In-vehicle device described.

The control unit includes:
Obtaining from the in-vehicle ECU to be updated the results of a standalone diagnosis performed by the in-vehicle ECU to be updated based on the operation confirmation scenario;
The in-vehicle device according to claim 4, wherein the success or failure of updating the program in the in-vehicle ECU to be updated is determined based on the obtained result of the unit diagnosis.

The control unit includes:
Complementing the operation confirmation scenario obtained from the external server using a relay log collected when performing communication relay processing between a plurality of in-vehicle ECUs installed in the vehicle,
outputting the acquired update program and the supplemented operation confirmation scenario to the in-vehicle ECU to be updated;
The in-vehicle device according to any one of claims 1 to 5, wherein processing related to operation confirmation for the in-vehicle ECU to be updated is performed based on the supplemented operation confirmation scenario.

According to any one of claims 1 to 6, the control unit performs processing related to operation confirmation for the in-vehicle ECU to be updated based on the operation confirmation scenario when the IG switch of the vehicle is turned off. In-vehicle device described.

The control unit includes:
outputting a sleep signal to other in-vehicle ECUs other than the in-vehicle ECU to be updated to cause the other in-vehicle ECUs to transition to a sleep mode;
The in-vehicle device according to any one of claims 1 to 7, wherein after outputting the sleep signal, processing related to operation confirmation of the in-vehicle ECU to be updated is performed based on the operation confirmation scenario.

A computer that acquires an update program sent from an external server outside the vehicle and performs processing to update the program of the in-vehicle ECU installed in the vehicle.
When acquiring the update program, acquiring an operation check scenario from the external server for checking the operation of the in-vehicle ECU to be updated;
outputting the acquired update program and the operation confirmation scenario to the in-vehicle ECU to be updated;
A program that executes a process of performing a process related to an operation check for the in-vehicle ECU to be updated based on the operation check scenario.

A computer that acquires an update program sent from an external server outside the vehicle and performs processing to update the program of the in-vehicle ECU installed in the vehicle.
When acquiring the update program, acquiring an operation check scenario from the external server for checking the operation of the in-vehicle ECU to be updated;
outputting the acquired update program and the operation confirmation scenario to the in-vehicle ECU to be updated;
A method for updating a program that causes a process to be performed based on the operation check scenario to perform a process related to checking the operation of the in-vehicle ECU to be updated.